Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0295: libpcap Security Advisory Updates
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo…
Mageia 2024-0294: expat Security Advisory Updates
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. (CVE-2024-45490) An issue was discovered in…
Ubuntu 6997-2: LibTIFF Security Advisory Updates
LibTIFF could be made to crash if it received specially crafted input.
SUSE: 2024:3208-1 moderate: glib2 Security Advisory Updates
* bsc#1224044 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5
SUSE: 2024:3210-1 moderate: libpcap Security Advisory Updates
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
SUSE: 2024:3211-1 moderate: curl Security Advisory Updates
* bsc#1230093 Cross-References: * CVE-2024-8096
SUSE: 2024:3209-1 important: the Linux Kernel Security Advisory Updates
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
openSUSE: 2024:0300-1 moderate: ntpd-rs Advisory Security Update
An update that fixes one vulnerability is now available.
SUSE: 2024:3202-1 moderate: curl Security Advisory Updates
* bsc#1228535 * bsc#1230093 Cross-References: * CVE-2024-7264
SUSE: 2024:3203-1 moderate: curl Security Advisory Updates
* bsc#1230093 Cross-References: * CVE-2024-8096
SUSE: 2024:3204-1 moderate: curl Security Advisory Updates
* bsc#1230093 Cross-References: * CVE-2024-8096
SUSE: 2024:3200-1 important: python311 Security Advisory Updates
* bsc#1225660 * bsc#1227378 * bsc#1227999 * bsc#1228780
Fedora 39: seamonkey 2024-94f6f1b500 Security Advisory Updates
Update to 2.53.19
Fedora 39: wireshark 2024-68faaf3451 Security Advisory Updates
New version 4.0.17, fix for CVE-2024-8250
Fedora 40: libell 2024-223428e702 Security Advisory Updates
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with …
Fedora 40: bluez 2024-223428e702 Security Advisory Updates
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with …
Fedora 40: wireshark 2024-105eb3026f Security Advisory Updates
New version 4.2.7, fix for CVE-2024-8250
Mageia 2024-0292: apr Security Advisory Updates
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Mageia 2024-0291: openssl Security Advisory Updates
Possible denial of service in X.509 name checks. (CVE-2024-6119) References: - https://bugs.mageia.org/show_bug.cgi?id=33520 - https://openssl-library.org/news…
Mageia 2024-0289: zziplib Security Advisory Updates
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z…
Mageia 2024-0288: orc Security Advisory Updates
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file w…
Mageia 2024-0287: libtiff Security Advisory Updates
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certai…
Debian LTS: DLA-3885-1: redis Security Advisory Updates
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
SUSE: 2024:3187-1 important: python-Django Security Advisory Updates
* bsc#1229823 Cross-References: * CVE-2024-45230